neoris/openvidu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

test: update cookie assertions to use SameSite=None and Secure attributes

Browse Source
This commit is contained in:
juancarmore 2025-10-07 13:30:32 +02:00
parent b13f18b4d3
commit 24c74e64b9
1 changed files with 9 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
backend/tests/helpers/assertion-helpers.ts
View File

@ -608,7 +608,8 @@ export const expectValidParticipantTokenResponse = (
expect(participantTokenCookie).toBeDefined(); expect(participantTokenCookie).toBeDefined();
expect(participantTokenCookie).toContain(token); expect(participantTokenCookie).toContain(token);
expect(participantTokenCookie).toContain('HttpOnly'); expect(participantTokenCookie).toContain('HttpOnly');
expect(participantTokenCookie).toContain('SameSite=Strict'); expect(participantTokenCookie).toContain('SameSite=None');
expect(participantTokenCookie).toContain('Secure');
expect(participantTokenCookie).toContain('Path=/'); expect(participantTokenCookie).toContain('Path=/');
}; };
@ -639,14 +640,15 @@ export const expectValidRecordingTokenResponse = (
// Check that the token is included in a cookie // Check that the token is included in a cookie
expect(response.headers['set-cookie']).toBeDefined(); expect(response.headers['set-cookie']).toBeDefined();
const cookies = response.headers['set-cookie'] as unknown as string[]; const cookies = response.headers['set-cookie'] as unknown as string[];
const participantTokenCookie = cookies.find((cookie) => const recordingTokenCookie = cookies.find((cookie) =>
cookie.startsWith(`${INTERNAL_CONFIG.RECORDING_TOKEN_COOKIE_NAME}=`) cookie.startsWith(`${INTERNAL_CONFIG.RECORDING_TOKEN_COOKIE_NAME}=`)
) as string; ) as string;
expect(participantTokenCookie).toBeDefined(); expect(recordingTokenCookie).toBeDefined();
expect(participantTokenCookie).toContain(token); expect(recordingTokenCookie).toContain(token);
expect(participantTokenCookie).toContain('HttpOnly'); expect(recordingTokenCookie).toContain('HttpOnly');
expect(participantTokenCookie).toContain('SameSite=Strict'); expect(recordingTokenCookie).toContain('SameSite=None');
expect(participantTokenCookie).toContain('Path=/'); expect(recordingTokenCookie).toContain('Secure');
expect(recordingTokenCookie).toContain('Path=/');
}; };
const decodeJWTToken = (token: string) => { const decodeJWTToken = (token: string) => {